get_provision
Look up security controls mapped to any framework provision (e.g., ISO_27001, NIST_800_53) by law and article, or retrieve a specific SCF control directly.
Instructions
Look up the SCF controls mapped to a security-framework provision reference, or fetch one SCF control directly with law='SCF'. Examples: law='ISO_27001', article='6.1.1'; law='IEC_62443', article='SR 1.1'; law='SCF', article='GOV-01'. Accepts gateway framework keys (ISO_27001, ISO_27002, NIST_CSF, NIST_800_53, IEC_62443, PCI_DSS, SOC_2, CIS, CMMC, COBIT, HIPAA) or any SCF framework key from list_frameworks (e.g. 'iso_27001_2022'). A bare parent ref (e.g. '6.1') matches all sub-references ('6.1.1', '6.1.2', ...). Returns a JSON envelope {results, _meta} with per-item _citation metadata. Body text is always the SCF control catalog (CC BY-ND 4.0) — this server does not redistribute framework body text. Returns up to 10 controls (~150 tokens each).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| law | Yes | Framework key: a gateway canonical key (e.g. ISO_27001, NIST_CSF), an SCF framework key from list_frameworks (e.g. 'iso_27001_2022'), or 'SCF' for a direct SCF control lookup. | |
| article | Yes | Provision reference within the framework (e.g. '6.1.1', 'SR 1.1', 'AC-2'), or the SCF control ID (e.g. 'GOV-01') when law='SCF'. | |
| jurisdiction | No | Accepted for gateway compatibility; ignored — security frameworks are not jurisdiction-scoped. |